Information on source package jackson-databind

Available versions

ReleaseVersion
jessie2.4.2-2
jessie (security)2.4.2-2+deb8u2
stretch2.8.6-1
stretch (security)2.8.6-1+deb9u2
buster2.9.1-1
sid2.9.1-1

Resolved issues

BugDescription
CVE-2017-7525Deserialization vulnerability via readValue method of ObjectMapper
CVE-2017-15095Incomplete fixes for CVE-2017-7525

Security announcements

DSA / DLADescription
DSA-4037-1jackson-databind - security update
DSA-4037-1jackson-databind - security update
DSA-4004-1jackson-databind - security update
DSA-4004-1jackson-databind - security update

Search for package or bug name: Reporting problems